Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366266393a3a2f34382d3438203d3e203136393039.roa
File: 326131343a373538343a366266393a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier: hsuP6kttMjy8UGKZ31Ciqvhnnh1vrkaqExcjCaNstRw=
Subject key identifier: E1:E3:6E:F8:FC:90:88:31:05:12:61:4C:50:19:B9:52:C0:E9:81:49
Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Certificate serial: 43813B7BEDEE5EC020FBDF26572D088E2F5DDE10
Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366266393a3a2f34382d3438203d3e203136393039.roa
Signing time: Thu 29 May 2025 16:18:03 +0000
ROA not before: Thu 29 May 2025 16:13:03 +0000
ROA not after: Thu 28 May 2026 16:18:03 +0000
asID: 16909
IP address blocks: 2a14:7584:6bf9::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 31 May 2025 17:16:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:81:3b:7b:ed:ee:5e:c0:20:fb:df:26:57:2d:08:8e:2f:5d:de:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45
Validity
Not Before: May 29 16:13:03 2025 GMT
Not After : May 28 16:18:03 2026 GMT
Subject: CN=E1E36EF8FC9088310512614C5019B952C0E98149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ba:f7:e2:05:af:4a:3c:c6:70:38:e6:de:9c:
82:9a:e2:10:33:53:b6:21:6a:38:d0:ad:18:cf:fb:
b4:07:4d:d2:72:1f:69:3f:bc:e5:a9:15:b8:e4:30:
99:b9:4d:fd:23:bf:c4:01:46:72:5a:78:b9:4b:8e:
35:93:a8:73:fb:b0:49:e1:cc:64:4f:58:22:6b:0f:
78:40:75:01:9d:92:43:96:88:eb:86:f7:da:a3:5d:
60:42:8b:8c:09:cd:9f:ad:09:cf:f7:7d:bf:0a:bd:
b0:71:f6:84:55:b8:22:df:fb:d3:1a:06:57:c3:28:
07:01:f9:09:54:54:1d:d4:51:de:fb:02:7f:5c:f7:
24:9f:28:30:ce:7a:ea:0d:b1:13:08:6e:47:75:d2:
a2:55:65:39:64:13:7f:cd:07:73:73:cf:b2:e6:a8:
6f:b7:c2:d4:81:7c:15:8c:33:5d:00:8b:0f:44:fa:
53:43:21:65:30:99:1b:8c:25:fe:01:7f:56:3b:8a:
fa:69:d8:fe:be:63:25:7a:12:d6:99:31:3c:70:d6:
a1:c0:97:cb:d7:41:3f:a7:09:4d:a4:57:b6:7d:88:
aa:12:0b:9f:e4:b2:ee:1a:bd:55:63:44:c1:de:43:
ef:b6:b1:d0:6e:e3:3c:48:2c:8e:f0:9c:87:c1:b9:
e2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E3:6E:F8:FC:90:88:31:05:12:61:4C:50:19:B9:52:C0:E9:81:49
X509v3 Authority Key Identifier:
keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/326131343a373538343a366266393a3a2f34382d3438203d3e203136393039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7584:6bf9::/48
Signature Algorithm: sha256WithRSAEncryption
74:cc:7e:4f:b9:86:b2:f6:3b:bc:a9:62:41:7a:11:46:dc:53:
eb:79:97:aa:af:f5:10:3d:d9:5f:4c:8a:b9:79:61:d5:39:18:
0c:63:a4:4e:37:17:a3:91:f8:0b:52:a7:ae:5a:aa:8e:52:93:
4a:20:e3:5c:d7:c8:f2:12:2f:d4:ef:5d:4b:d1:dd:51:c5:14:
1b:1f:45:85:2f:c8:53:b7:28:26:ae:f0:3c:ab:92:60:0b:7f:
37:9f:0c:6b:13:42:65:cf:18:24:d0:3e:be:a8:94:aa:39:81:
54:1a:39:61:40:b4:8a:5b:d9:2f:cf:55:fa:d3:a6:08:20:34:
dd:55:25:80:0e:63:65:2c:d5:72:cd:af:56:1b:9b:f7:5b:f9:
fc:2b:66:58:2d:01:b7:0d:4c:4e:a3:09:45:28:7b:a3:32:08:
e7:e1:a6:c7:c3:6a:66:f3:2c:96:95:f1:d1:bc:41:d5:22:56:
33:08:5c:83:7c:c9:b0:9d:72:8a:cb:82:15:4c:51:7f:c8:43:
20:6f:0a:37:cc:c1:b6:9a:e9:be:1b:0d:6e:59:10:45:35:e6:
de:12:f1:35:73:80:70:d2:06:69:5f:92:b9:36:89:73:3f:42:
b9:7d:59:f5:c7:e1:f9:b5:d2:0e:e3:af:b3:12:1b:98:f5:18:
d4:a0:5b:da
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUQ4E7e+3uXsAg+98mVy0Iji9d3hAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw
QzlGMEE0NTAeFw0yNTA1MjkxNjEzMDNaFw0yNjA1MjgxNjE4MDNaMDMxMTAvBgNV
BAMTKEUxRTM2RUY4RkM5MDg4MzEwNTEyNjE0QzUwMTlCOTUyQzBFOTgxNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKuvfiBa9KPMZwOObenIKa4hAz
U7YhajjQrRjP+7QHTdJyH2k/vOWpFbjkMJm5Tf0jv8QBRnJaeLlLjjWTqHP7sEnh
zGRPWCJrD3hAdQGdkkOWiOuG99qjXWBCi4wJzZ+tCc/3fb8KvbBx9oRVuCLf+9Ma
BlfDKAcB+QlUVB3UUd77An9c9ySfKDDOeuoNsRMIbkd10qJVZTlkE3/NB3Nzz7Lm
qG+3wtSBfBWMM10Aiw9E+lNDIWUwmRuMJf4Bf1Y7ivpp2P6+YyV6EtaZMTxw1qHA
l8vXQT+nCU2kV7Z9iKoSC5/ksu4avVVjRMHeQ++2sdBu4zxILI7wnIfBueKvAgMB
AAGjggJoMIICZDAdBgNVHQ4EFgQU4eNu+PyQiDEFEmFMUBm5UsDpgUkwHwYDVR0j
BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy
RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm
MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu
Y2VyMIGqBggrBgEFBQcBCwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMS8zMjYxMzEzNDNhMzczNTM4MzQzYTM2NjI2NjM5M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoUdYRr+TAN
BgkqhkiG9w0BAQsFAAOCAQEAdMx+T7mGsvY7vKliQXoRRtxT63mXqq/1ED3ZX0yK
uXlh1TkYDGOkTjcXo5H4C1KnrlqqjlKTSiDjXNfI8hIv1O9dS9HdUcUUGx9FhS/I
U7coJq7wPKuSYAt/N58MaxNCZc8YJNA+vqiUqjmBVBo5YUC0ilvZL89V+tOmCCA0
3VUlgA5jZSzVcs2vVhub91v5/CtmWC0Btw1MTqMJRSh7ozII5+Gmx8NqZvMslpXx
0bxB1SJWMwhcg3zJsJ1yisuCFUxRf8hDIG8KN8zBtprpvhsNblkQRTXm3hLxNXOA
cNIGaV+SuTaJcz9CuX1Z9cfh+bXSDuOvsxIbmPUY1KBb2g==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:37:52 2025 by rpki-client